It actually has some ideas that might be worth building on. Wouldn't it be great if when a bug was discovered the authors of the program was the only ones contacted and the only thing sent out publicly would be a notice of the bugfix being available?

That way I do believe the stupid script-kiddies would have quite a hard time cracking..

This would of course only work in a perfect world where everybody follows this idea..

Please note that I am NOT for the anti-disclosure movement, I just read about it on anti.security.is and thought that it actually might have some ideas worth working with..

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/215/5887#5887